multi_uploader_for_gravity_forms vulnerabilities

CVEs whose affected-version data names the multi_uploader_for_gravity_forms package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-87796Critical· 9.8PoC

5d ago

The Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.1.9 via the move_file function

The Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.1.9 via the move_file function. This is due to insufficient file type validation during chunked uplo…

▾ Abyssalsh1zen · Multi Uploader for Gravity FormsEPSS 0.61%via NVD